Team and access
Inviting colleagues, roles, and how access differs from an API key.
Inviting colleagues
Settings → Members → Invite. They receive an email with a link; accepting joins them to your company. Everyone in a company shares its domains, keywords and billing.
Roles
| Role | Can do |
|---|---|
| Owner | Everything, including billing and deleting the company. |
| Admin | Everything except ownership transfer — including members and API keys. |
| Member | Use the product. Not billing, members or API keys. |
Only owners and administrators can create or revoke API keys.
People versus keys
A member is a person with a login, seeing the whole account. An API key is a credential for a program, and can be scoped much more tightly — one domain, read-only, with an expiry.
For a contractor who needs to look at one site, a domain-scoped read-only key is usually the better fit than an account login: narrower, revocable, and every action it takes is recorded. See API authentication.
Removing someone
Removing a member revokes their access immediately. It does not revoke API keys they created — keys belong to the company, not the person. Review the key list when someone leaves.